Norman Blog

insight, opinion & information

 
 

Tag Archives: targeted attack

W32/DistTrack.A

DistTrack is an overwriting malware rumored to be behind destructive actions in the Middle East. Some report it to be used in targeted attacks against companies in the energy sector. The initial executable is a 32-bit Windows executable, 989184 bytes long. When run, it installs itself as a service using … Read More

Trojan moves its configuration to Twitter, LinkedIn, MSDN and Baidu

Sogu (alias Thoper, TVT, Destory Rat etc) is a large remote access trojan that has been used in a number of intrusions and targeted attacks. One of these was the large scale intrusion into servers owned by SK Communications in South Korea July 2011, where personal information of up to … Read More